Secure Computing SSL Scanner, User Manual

Page: 175 / 191

SSL Scanner
To add an exception to the list, use the area labeled:
•
Add new exception
In the input field provided here, enter the exception you want to add to the
certificate list.
https://
has been entered in this field as default information at the begin-
ning of an exception name. The input format for its remaining parts is:
host [:port]
Furthermore, configure the following methods for a new exception:
—
by certificate
Enabling the
by certificate
method means that the certificate issued
for the host you are adding as an exception is checked by the verifica-
tion process.
After enabling this method, select an action from the drop-down list
provided here.
For the meaning of these actions, see the following table:
by certificate by host
Allow
The exception is allowed.
not available
Block
The exception is blocked. The exception is blocked.
Tunnel
The activities of the SSL
Scanner are bypassed and
no verification process is
executed.
The activities of the SSL
Scanner are bypassed and
no verification process is
executed.
Warn Incident
The exception is allowed, but
a warning is displayed.
not available
Only Cert
Checking not available
The content provided by the
host you are adding as an
exception is not decrypted,
and the exception is allowed.
Note:
In this case, the
certificate will be checked.
Only
Decryption not available
The content provided by the
host you are adding as an
exception is decrypted, and
the exception is allowed.
4–15